$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a2c3e6bf-5481-3a46-bcda-6848b0b62155.roa File: a2c3e6bf-5481-3a46-bcda-6848b0b62155.roa (raw, json) Hash identifier: x4EuvFiO8Ynbc4eAaO/d/v7ThER6K2YoDcQb5PFQ7Y0= Subject key identifier: 42:C6:A9:F9:B9:17:1C:C8:7A:85:6F:10:73:08:C7:06:A8:18:74:90 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285848EC96A45CA6E8BAB5B6155500 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a2c3e6bf-5481-3a46-bcda-6848b0b62155.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 130.137.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:a4:5c:a6:e8:ba:b5:b6:15:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=c52d2fd8-45d0-4482-a881-40568404adb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4a:2f:9e:25:40:06:f6:bc:2f:a7:28:0c:7e: 96:3a:13:08:bb:e0:87:49:8a:ea:ac:fa:e0:8d:e4: 1c:da:c7:2e:ae:5a:87:f0:be:a6:6e:3f:eb:dd:08: f5:b5:97:34:a5:74:cc:47:e7:fe:62:73:ed:51:b4: ff:ae:45:88:4b:e3:e6:bb:35:d1:35:a8:b1:72:cc: ad:ba:7e:bf:23:cc:d3:81:f8:bb:6f:92:a2:a6:43: f0:b8:79:81:fa:1b:c8:0f:29:9b:e0:a1:19:28:e3: 61:5c:81:7e:35:08:d0:51:f5:12:05:64:fb:99:14: bd:1d:fd:4e:68:d7:80:09:ea:26:22:55:b9:51:1f: bb:84:74:10:df:d3:3f:ca:54:c5:7e:b3:5f:d1:ea: 2c:ac:b5:21:fc:a7:83:d3:7b:aa:fa:7d:24:84:e4: 98:7b:de:3c:43:11:2e:2d:99:e9:11:da:bc:00:76: 05:cf:95:8b:ab:ff:dc:4d:f4:6d:b0:ca:57:58:a5: 5c:29:c8:16:34:e1:78:15:77:28:6f:bf:aa:dd:3e: ba:67:d3:de:4c:4e:1d:1f:eb:01:3c:09:4f:70:01: c7:e8:3a:69:7b:0d:3e:9a:02:16:7d:2b:ee:f3:77: fb:9d:6b:d1:36:e0:0e:b8:0c:85:1f:33:f6:a2:c9: 18:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C6:A9:F9:B9:17:1C:C8:7A:85:6F:10:73:08:C7:06:A8:18:74:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a2c3e6bf-5481-3a46-bcda-6848b0b62155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:79:76:85:04:1c:d4:1b:50:0b:ae:50:67:50:10:35:a1:29: bc:f8:72:e6:2f:d5:a9:09:7e:2b:cf:e4:dc:70:df:84:d8:b6: 67:78:6b:90:02:a8:93:29:6f:90:51:2c:22:75:91:fd:72:b2: 02:3e:e2:2f:1f:d5:61:6e:91:67:bd:3a:20:10:8f:24:4b:51: 4d:ce:0d:75:fb:ad:c8:68:eb:c6:59:bf:26:9e:5b:34:d7:d0: ad:fe:67:47:8e:4e:94:ed:9b:a9:e3:d3:fc:63:fb:af:36:c6: 33:91:04:06:9f:0e:06:12:88:1b:f9:68:e1:dd:03:be:49:e5: d1:01:6b:7d:59:53:8e:ac:1a:8b:87:1f:21:af:e7:34:b8:a7: f8:dc:d7:60:13:ca:0e:f4:20:e9:0f:72:89:df:a6:b2:cb:ac: d5:0d:31:b4:96:25:17:e8:53:eb:98:f4:1e:54:43:b1:20:dd: e7:70:57:da:77:b4:0e:57:00:ca:f3:25:3e:d4:20:d9:a4:f5: e4:c9:d7:50:29:24:76:45:84:0b:d1:a3:77:58:34:5c:cd:b1: 4a:e2:af:3b:b8:85:7b:b9:f7:28:cd:21:a4:84:8b:af:24:c1: ec:17:3a:de:f1:a6:54:53:dd:07:4e:12:a1:04:21:17:a6:f7: 15:e7:17:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslqRcpui6tbYVVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk YzUyZDJmZDgtNDVkMC00NDgyLWE4ODEtNDA1Njg0MDRhZGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEovniVABva8L6coDH6WOhMIu+CHSYrqrPrg jeQc2scurlqH8L6mbj/r3Qj1tZc0pXTMR+f+YnPtUbT/rkWIS+PmuzXRNaixcsyt un6/I8zTgfi7b5KipkPwuHmB+hvIDymb4KEZKONhXIF+NQjQUfUSBWT7mRS9Hf1O aNeACeomIlW5UR+7hHQQ39M/ylTFfrNf0eosrLUh/KeD03uq+n0khOSYe948QxEu LZnpEdq8AHYFz5WLq//cTfRtsMpXWKVcKcgWNOF4FXcob7+q3T66Z9PeTE4dH+sB PAlPcAHH6Dppew0+mgIWfSvu83f7nWvRNuAOuAyFHzP2oskY8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELGqfm5FxzIeoVvEHMIxwaoGHSQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYTJjM2U2YmYtNTQ4MS0z YTQ2LWJjZGEtNjg0OGIwYjYyMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgok5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGx5doUEHNQbUAuuUGdQEDWhKbz4cuYv1akJfivP5Nxw34TYtmd4a5AC qJMpb5BRLCJ1kf1ysgI+4i8f1WFukWe9OiAQjyRLUU3ODXX7rcho68ZZvyaeWzTX 0K3+Z0eOTpTtm6nj0/xj+682xjORBAafDgYSiBv5aOHdA75J5dEBa31ZU46sGouH HyGv5zS4p/jc12ATyg70IOkPconfprLLrNUNMbSWJRfoU+uY9B5UQ7Eg3edwV9p3 tA5XAMrzJT7UINmk9eTJ11ApJHZFhAvRo3dYNFzNsUrirzu4hXu59yjNIaSEi68k wewXOt7xplRT3QdOEqEEIRem9xXnF9Y= -----END CERTIFICATE-----Generated at Sat Apr 26 13:20:25 2025 by rpki-client